e351ae6323af450d16c9627ef112df268635fe9a16d20fd7e14c9e9e36ed0a3a

Sharing

Copy URL

Twitter E-mail

General

Target

e351ae6323af450d16c9627ef112df268635fe9a16d20fd7e14c9e9e36ed0a3a
Size

251KB
MD5

5a2464dd8d358eae6a7c4e3f34e2c397
SHA1

05bba1190ef667f51057f90b957ee1563bf1c0ee
SHA256

e351ae6323af450d16c9627ef112df268635fe9a16d20fd7e14c9e9e36ed0a3a
SHA512

93b528c9467413de1be7c798258aae93b1880ca2c2ea39d05594017b97e383edac7ff069a2f13d6b447658758a9c26632578e07a3289a5af68a06ec96168dc6e
SSDEEP

6144:4m6TcxBf15vI3hGYFaOH7j7eF3uREWRKRU1z:44xpQwYFa0H7exiNR1z

Score

N/A

Malware Config

Signatures

Files

e351ae6323af450d16c9627ef112df268635fe9a16d20fd7e14c9e9e36ed0a3a
.exe windows x86

fe38532b81c32a9d6fc8c4265e96ebb7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
MultiByteToWideChar
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
Sleep
InterlockedExchange
DeleteCriticalSection
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
SetThreadExecutionState
GetConsoleAliasExesLengthW
AddAtomA
IsBadWritePtr
GetCurrentThread
lstrcpyA
FreeResource
Process32NextW
GetVolumePathNamesForVolumeNameW
LZCreateFileW
CreateFileMappingW
DeleteFileA
MapUserPhysicalPages
QueueUserAPC
SetFileApisToANSI
UnregisterWaitEx
GetThreadSelectorEntry
GetTempPathW
VirtualAlloc
GetCommConfig
GetDriveTypeA
SetTapePosition
IsSystemResumeAutomatic
WriteTapemark
FindActCtxSectionStringW
WriteConsoleInputW
SetCommConfig
GetNumberOfConsoleInputEvents
CreateNamedPipeW
RtlFillMemory
GetLogicalDriveStringsW
Heap32ListNext
lstrlenA
BuildCommDCBAndTimeoutsW
GetFullPathNameA
LZSeek
lstrcmp
SetCalendarInfoA
SetDefaultCommConfigA
OpenConsoleW
EnumResourceTypesW
WaitCommEvent
EraseTape
PeekConsoleInputW
LZOpenFileA
GlobalHandle
CreateActCtxA
QueryPerformanceFrequency
ZombifyActCtx
AddLocalAlternateComputerNameA
GetHandleInformation
GlobalAddAtomW
GetTapeStatus
lstrcpyW
BaseUpdateAppcompatCache
DeleteAtom
GlobalDeleteAtom
SetTimerQueueTimer
SetFileShortNameA
DeleteVolumeMountPointW
ReleaseMutex
GetAtomNameW
EnumResourceLanguagesA
BeginUpdateResourceW
GetSystemWindowsDirectoryW
GetCPInfoExA
GetComputerNameA
RegisterWaitForInputIdle
CreateEventW
SetThreadPriority
VerifyVersionInfoA
lstrcat
LockResource
GetCompressedFileSizeA
FreeConsole
GetNamedPipeHandleStateW
GetSystemInfo
GlobalFree
FillConsoleOutputAttribute
IsBadStringPtrA
GetConsoleScreenBufferInfo
FindAtomW
FindNextVolumeMountPointA
GetProcessHeaps
GetLongPathNameW
ConvertFiberToThread
FindFirstFileExA
GetConsoleAliasesLengthW
SetDefaultCommConfigW
GetTempFileNameA
GetProcessTimes
LocalCompact
IsDBCSLeadByteEx
GetShortPathNameW
LZDone
FindVolumeClose
ExitThread
HeapSetInformation
InitializeSListHead
VirtualAllocEx
GetModuleHandleA
CreateEventA
WaitForSingleObject
LocalAlloc
LocalSize
GetEnvironmentStringsA
GetEnvironmentVariableA

msvcrt

localeconv
_Gettnames
__mb_cur_max
fgetc
fgetwc
fputc
fputwc
ungetc
ungetwc
__CxxFrameHandler
setvbuf
fflush
_CxxThrowException
fclose
fgetpos
fseek
sprintf
strcspn
strtol
_errno
fwrite
fsetpos
_Strftime
_Getdays
_Getmonths
strtoul
free
_iob
realloc
setlocale
malloc
__crtCompareStringA
__lc_collate_cp
_unlock
__lc_handle
_lock
__setlc_active
__unguarded_readlc_active
__crtLCMapStringA
__lc_codepage
towlower
towupper
strcmp
_pctype
_isctype
strtod
?terminate@@YAXXZ
__dllonexit
_onexit
_initterm
memset
memmove
memchr
memcpy
strlen
memcmp
wcslen
sqrt
sin
pow
log
ldexp
exp
cos
fopen
atan2

user32

GetKeyboardState
CallMsgFilterW
SetWindowLongW
GetRawInputDeviceInfoW
DdeClientTransaction
PrivateExtractIconExW
GetAppCompatFlags
FreeDDElParam
wvsprintfW
RemoveMenu
SetMenu
SetDeskWallpaper
ShowCursor
SetParent
GetWindowPlacement
DlgDirSelectExA
SetUserObjectSecurity
GetKBCodePage
EndTask
UserRealizePalette
DdeCmpStringHandles
LockWindowUpdate
DrawMenuBar
EnumClipboardFormats
InvertRect
InternalGetWindowText
EnumPropsExW
UnregisterDeviceNotification
SendMessageCallbackW
SwitchToThisWindow
GetTopWindow
RegisterSystemThread
GetAncestor
GetFocus
GetMessageA
GetClassLongW
DdeQueryNextServer
CopyAcceleratorTableW
IMPQueryIMEW
SetShellWindow
DdePostAdvise
IsWindowVisible
ChangeDisplaySettingsExW
PostThreadMessageW
MonitorFromWindow
PrivateExtractIconExA
SetCaretPos
WindowFromDC
OemKeyScan
SetProgmanWindow
DrawFrameControl
BroadcastSystemMessage
CharUpperW
GetMenuStringA
LoadCursorFromFileA
EqualRect
RealGetWindowClass
CharPrevExA
SendIMEMessageExW
RegisterLogonProcess
SendMessageCallbackA
UnhookWindowsHookEx
IsRectEmpty
EnumPropsA
GetInputState
DestroyAcceleratorTable
SetLayeredWindowAttributes
ChangeClipboardChain
OpenIcon
DlgDirListComboBoxA
GetScrollInfo
GetWindow
EnumWindowStationsA
GetClassNameA
CreateWindowStationW
SendNotifyMessageA
SetClassLongW
GetForegroundWindow
SoftModalMessageBox
SetUserObjectInformationA

gdi32

GdiCreateLocalEnhMetaFile
CreatePen
HT_Get8BPPMaskPalette
GetPath
GetTextExtentPointI
ExtTextOutW
CreateFontIndirectExA
GdiGetPageCount
TextOutA
EngCreateDeviceBitmap
GetTextExtentPointW
RestoreDC
StartDocW
CopyEnhMetaFileW
SetTextJustification
DdEntry42
GdiInitSpool
UpdateICMRegKeyA
GetRelAbs
CreateHatchBrush
CreatePolyPolygonRgn
EngMultiByteToWideChar
PolyBezierTo
DdEntry41
FONTOBJ_pifi
GetCharWidthI
ExcludeClipRect
EnumFontFamiliesW
SwapBuffers
ResetDCW
SetSystemPaletteUse
GdiEntry11
CreateICW
CreateFontIndirectW
EngUnicodeToMultiByteN
GetLogColorSpaceW
DdEntry25
GetPaletteEntries
DdEntry13
GdiEntry6
SetPolyFillMode
GetMetaFileBitsEx
CreateICA
RealizePalette
EnumFontsW
GdiDescribePixelFormat

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 9KB - Virtual size: 2.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 8KB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 191KB - Virtual size: 278KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.��
Size: 15KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 504B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fe38532b81c32a9d6fc8c4265e96ebb7

Headers

File Characteristics

Imports

kernel32

msvcrt

user32

gdi32

Sections

.text Size: 18KB - Virtual size: 17KB

.edata Size: 9KB - Virtual size: 2.5MB

.rdata Size: 8KB - Virtual size: 8KB

.pdata Size: 8KB - Virtual size: 1.4MB

.data Size: 191KB - Virtual size: 278KB

.������ Size: 15KB - Virtual size: 3.6MB

.rsrc Size: 512B - Virtual size: 504B

.text
Size: 18KB - Virtual size: 17KB

.edata
Size: 9KB - Virtual size: 2.5MB

.rdata
Size: 8KB - Virtual size: 8KB

.pdata
Size: 8KB - Virtual size: 1.4MB

.data
Size: 191KB - Virtual size: 278KB

.��
Size: 15KB - Virtual size: 3.6MB

.rsrc
Size: 512B - Virtual size: 504B